Security Settings
Manage emails, social connections, passwords, and active sessions to secure your account.
Your security settings help protect your Firebuzz account with multiple layers of security. Manage email addresses, link social accounts, update passwords, and monitor active sessions all from one page.
Accessing Security Settings
To access your security settings:
- Click Settings in the sidebar
- Navigate to Account
- Select the ProfileSecurityWorkspaces
The Security tab displays four sections on a single scrollable page:
- Email Settings - Manage multiple email addresses
- Social Connections - Link Google or Facebook accounts
- Password Settings - Set or update your password
- Device Settings - View and manage active sessions
All security settings are on one page. Scroll down to access each section without switching between tabs.
Email Settings
Manage multiple email addresses for your account. Add backup emails, set your primary email, and verify addresses for account recovery.
Your Email Addresses
The Email Settings section displays all emails linked to your account:
- Primary Email: Marked with Primary badge
- Verification Status: Verified or Unverified
- Remove Option: Delete icon for non-primary emails
- Set as Primary: Option to make any verified email your primary
Adding an Email Address
To add a new email to your account:
- Navigate to Settings → Account → ProfileSecurityWorkspaces
- Scroll to Email Settings
- Click Add Email
- Enter the new email address: Email Address:
- Click Send Verification
- Check your inbox for the verification email
- Click the verification link in the email
The new email will appear in your list with an Unverified badge until verified.
Add a backup email address for account recovery. If you lose access to your primary email, you can use a verified backup email to regain access.
Verifying an Email Address
Unverified emails cannot be set as primary or used for account recovery:
- Find the unverified email in your list
- Click Resend Verification if needed
- Open the verification email
- Click the verification link
- Return to the Security settings page
The email will now show Verified.
Setting a Primary Email
Your primary email is used for:
- Signing into Firebuzz
- Receiving important notifications
- Password reset emails
- Billing and subscription communications
To change your primary email:
- Navigate to the Email Settings section
- Find a verified email you want to make primary
- Click Set as Primary
- Confirm the change
Your new primary email is immediately active for sign-in.
Make sure the email is verified before setting it as primary. You cannot set an unverified email as your primary email.
Removing an Email Address
To remove an email from your account:
- Find the email you want to remove (cannot be your primary email)
- Click the remove icon
- Confirm the removal
You cannot remove your primary email. Set a different email as primary first, then remove the old one.
Social Connections
Link your Google or Facebook account to enable quick sign-in without entering your password. Social connections are managed through Clerk authentication.
Available Social Providers
Sign in with your Google account for faster authentication.
Use your Facebook account to log into Firebuzz.
Linking a Social Account
To connect a Google or Facebook account:
- Navigate to Settings → Account → ProfileSecurityWorkspaces
- Scroll to Social Connections
- Find the provider you want to link
- Click Connect
- Authorize Firebuzz in the popup window
- Complete the authentication flow
The account will now show as Connected.
Social connections allow you to sign in without a password. You can link multiple social accounts to your Firebuzz account for flexibility.
Sign In with Social Accounts
Once connected, you can use social sign-in:
- Go to the Firebuzz sign-in page
- Click Sign in with Google or Sign in with Facebook
- Authorize access (if prompted)
- You're signed in without entering a password
Unlinking a Social Account
To disconnect a social account:
- Navigate to Social Connections in the Security tab
- Find the connected account
- Click Disconnect
- Confirm the disconnection
Make sure you have another sign-in method (email/password or another social account) before disconnecting. You need at least one way to access your account.
Password Settings
Set or update your account password for traditional email and password authentication.
Password Status
The Password Settings section shows:
- Password Set: Active if you have a password
- No Password: Not Set if signing in with social only
- Last Changed: Date of your last password update
Setting Your First Password
If you signed up with Google or Facebook, you may not have a password:
- Navigate to Settings → Account → ProfileSecurityWorkspaces
- Scroll to Password Settings
- Click Set Password
- Enter a new strong password: New Password:
- Confirm the password: Confirm Password:
- Click Save Password
You can now sign in with your email and password.
Updating Your Password
To change your existing password:
- Navigate to Password Settings in the Security tab
- Click Update Password
- Enter your current password: Current Password:
- Enter your new password: New Password:
- Confirm the new password: Confirm New Password:
- Click Update Password
Your password is updated immediately.
Use a strong, unique password with at least 8 characters, including uppercase letters, lowercase letters, numbers, and special characters.
Forgot Password
If you forgot your password:
- Go to the Firebuzz sign-in page
- Click Forgot Password
- Enter your email address
- Check your inbox for the reset email
- Click the reset link
- Enter a new password
- Sign in with your new password
Password reset emails are sent to your primary email address. If you don't receive the email, check your spam folder or add a backup email address for recovery.
Device Settings (Active Sessions)
Monitor all devices signed into your account and revoke access remotely for security.
Session Information
The Device Settings section displays all active sessions with details:
- Device Type: Desktop or Mobile
- Browser: Chrome, Safari, Firefox, etc.
- Operating System: Windows, macOS, iOS, Android, Linux
- IP Address: Location identifier
- Location: City and country (approximate)
- Last Active: Timestamp of most recent activity
- Current Session: This Device for your active session
Viewing Active Sessions
To see all devices signed into your account:
- Navigate to Settings → Account → ProfileSecurityWorkspaces
- Scroll to Device Settings
- Review the list of active sessions
Each session shows when it was last used and where it's located.
Understanding Session Details
Device Icons:
- Desktop/Laptop computer
- Mobile phone or tablet
Location Information:
- Approximate location based on IP address
- May show ISP location, not exact physical location
- VPNs may show different locations
Last Active:
- Timestamp shows when the session was last used
- Sessions auto-expire after 30 days of inactivity
The session marked This Device is your current browser. You cannot revoke your active session from this page.
Revoking a Session
To sign out a device remotely:
- Navigate to Device Settings in the Security tab
- Find the session you want to revoke
- Click Revoke or the icon
- Confirm the revocation
The device is immediately signed out and must sign in again to access your account.
If you see a session you don't recognize, revoke it immediately and change your password. This could indicate unauthorized access to your account.
Revoking All Sessions
To sign out all devices at once:
- Navigate to Device Settings
- Click Revoke All Sessions
- Confirm the action
All devices except your current browser are signed out immediately.
Use "Revoke All Sessions" if you suspect your account has been compromised or if you want to force all devices to sign in again with updated credentials.
Session Security Best Practices
- Review Regularly: Check active sessions monthly for unfamiliar devices
- Revoke Unknown Sessions: Sign out any sessions you don't recognize
- Use Strong Passwords: Prevent unauthorized access with secure passwords
- Sign Out on Shared Devices: Always sign out when using public computers
- Enable 2FA: Add an extra layer of security (configured during sign-in via Clerk)